Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 20:59:14.531 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 10 6452 1 2025-12-03 21:00:14.933 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:38546 10 6452 1 2025-12-03 21:01:15.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 10 6452 1 2025-12-03 21:01:44.214 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:01:44.216 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:01:44.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:01:44.115 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:01:44.198 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:58:10.330 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:58:10.333 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:02:15.723 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53226 10 6452 1 2025-12-03 21:03:16.132 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51870 10 6452 1 2025-12-03 21:04:16.539 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45638 11 6504 1 2025-12-03 21:05:16.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42614 10 6452 1 2025-12-03 21:06:17.365 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52536 10 6452 1 2025-12-03 21:06:44.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:06:44.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:06:44.072 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:06:44.353 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:06:44.436 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:07:17.773 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 2025-12-03 21:04:10.330 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:04:10.333 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:08:18.184 00:00:10.654 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6452 1 2025-12-03 21:09:18.879 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34950 10 6452 1 2025-12-03 21:10:19.283 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40436 10 6452 1 2025-12-03 21:11:19.684 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-12-03 21:11:44.843 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:11:44.754 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:11:44.627 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:11:44.761 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:11:44.456 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:12:20.061 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44966 10 6452 1 2025-12-03 21:13:20.462 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-12-03 21:10:10.333 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:10:10.337 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:14:20.825 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6452 1 2025-12-03 21:15:21.225 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46528 10 6452 1 2025-12-03 21:16:21.645 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60350 10 6452 1 2025-12-03 21:16:44.634 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:16:44.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:16:44.556 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:16:44.609 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:16:44.692 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:17:22.049 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35094 10 6452 1 2025-12-03 21:18:22.462 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:44030 10 6452 1 2025-12-03 21:19:22.861 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:46230 10 6452 1 2025-12-03 21:16:10.337 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:16:10.334 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:20:23.306 00:00:10.939 TCP 1.101.0.1:3000 -> 23.104.0.1:58788 10 6452 1 2025-12-03 21:21:24.305 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54580 10 6452 1 2025-12-03 21:21:44.806 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:21:44.894 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:21:44.364 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:21:44.897 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:21:44.980 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:22:24.670 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49900 12 6556 1 2025-12-03 21:23:25.104 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47182 10 6452 1 2025-12-03 21:24:25.508 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50042 10 6452 1 2025-12-03 21:25:25.917 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56442 10 6452 1 2025-12-03 21:22:10.336 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:22:10.338 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:26:26.333 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:35764 10 6452 1 2025-12-03 21:26:44.843 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:26:44.909 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:26:44.763 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:26:44.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:26:44.761 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:27:26.854 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50378 10 6452 1 2025-12-03 21:28:27.274 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45862 10 6452 1 2025-12-03 21:29:27.637 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46384 10 6452 1 2025-12-03 21:30:28.050 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6452 1 2025-12-03 21:31:45.134 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:31:28.420 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58508 10 6452 1 2025-12-03 21:31:44.976 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:31:45.153 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:31:45.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:31:45.053 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:28:10.340 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:28:10.344 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:32:28.828 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51492 10 6452 1 2025-12-03 21:33:29.228 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49620 10 6452 1 2025-12-03 21:34:29.639 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51612 10 6452 1 2025-12-03 21:35:30.040 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60094 10 6452 1 2025-12-03 21:36:30.443 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49314 10 6452 1 2025-12-03 21:36:44.923 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:36:44.940 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:36:45.008 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:36:45.149 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:36:45.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:37:30.803 00:00:11.600 TCP 1.101.0.1:3000 -> 23.104.0.1:48856 10 6452 1 2025-12-03 21:34:10.343 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:34:10.342 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:38:32.438 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58440 10 6452 1 2025-12-03 21:39:32.839 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:57316 10 6452 1 2025-12-03 21:40:33.261 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55574 10 6452 1 2025-12-03 21:41:33.662 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56518 10 6452 1 2025-12-03 21:41:45.154 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:41:45.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:41:44.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:41:45.075 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:41:45.157 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:42:34.067 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54014 10 6452 1 2025-12-03 21:43:34.477 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:40008 10 6452 1 2025-12-03 21:40:10.343 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:40:10.345 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:44:34.856 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33872 10 6452 1 2025-12-03 21:45:35.225 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-12-03 21:46:45.331 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:46:45.334 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:46:44.977 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:46:45.207 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:46:35.626 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44190 10 6452 1 2025-12-03 21:46:45.291 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:47:36.030 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:34734 12 10369 1 2025-12-03 21:48:36.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60244 10 6452 1 2025-12-03 21:49:36.923 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:44518 10 6452 1 2025-12-03 21:46:10.346 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:46:10.343 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:50:37.298 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51050 10 6452 1 2025-12-03 21:51:45.406 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:51:45.324 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:51:45.498 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:51:37.702 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33206 10 6452 1 2025-12-03 21:51:45.497 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:51:45.499 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:52:38.116 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35500 10 6452 1 2025-12-03 21:53:38.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-12-03 21:54:38.922 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38716 10 6452 1 2025-12-03 21:55:39.295 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57414 10 6452 1 2025-12-03 21:52:10.349 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:52:10.348 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 21:56:45.655 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 21:56:45.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 21:56:45.624 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 21:56:45.343 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:56:45.572 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 21:56:39.702 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 10 6452 1 2025-12-03 21:57:40.128 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46916 10 6452 1 Summary: total flows: 139, total bytes: 414621, total packets: 1015, avg bps: 926, avg pps: 0, avg bpp: 408 Time window: 2025-12-03 20:58:10 - 2025-12-03 21:57:50 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0042s User: 0.0011s Wall: 0.0012s flows/second: 112095.4 Runtime: 0.0013s